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Background Art 
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stored or being communicated are in a state wherein it 
is not useful unless it is restored like paper information 
brol<en by a shredder, even if a third party who does not 
have restoration means accesses the electronic infor- 
mation, the electronic information is not leaked as valu- 
able information, and therefore, it is secure. 
[00121 Also where only one information block is 
formed for an electronic information file, since the order 
of the infomiation elements placed in the information 
* block is different, it is difficult to read or discriminate the 
infomiation. However, where a plurality of information 
blocks are formed and stored or sent separately from 
each other, then even if a third party steals one of the 
infomnation blocks, the entire contents of the electronic 
information are not stolen, and consequently, naturally 
the security is improved further. 
[001 3] Also it is possible to apply a cipher technique 
to store or send the inf omnation blocks to achieve further 
improvement of the security. 

[0014] The division extraction data is data necessary 
for division and combination used when the information 
blocks are formed, and is stored or sent together with 
the information blocks. Since the division extraction data 
includes position information and length inf omnation of 
each information element in the electronic information 
file, it may be annexed to each information element and 
handled together with an information block. Further, 
where the importance is attached to the security, the di- 
vision extraction data may be handled separately from 
the inf omnation blocks. 

[001 51 A person who extracts or receives the electron- 
ic information collects all of the infomnation blocks and 
uses the division extraction data to separate the infor- 
mation elements included in the individual information 
blocks and re-couple the infonnation elements m the 
correct order to restore the original electronic infomna- 
tion. , L. * ^ 

[001 61 When the electronic information is to be stored 
into an external storage apparatus of a computer, infor- 
mation blocks and division extraction data may be pro- 
duced by processing the electronic information file in 
such a manner as described above and stored into the 
external apparatus. 

[0017] Where the security assurance method ot the 
present invention is applied to a storage apparatus, 
even if the storage apparatus is accessed by a third par- 
ly this does not lead to leakage of valuable information, 
and the security in storage of electronic information by 
the computer is improved. 

[001 8] It IS to be noted that, where electronic informa- 
tion is to be sent, preferably an electronic information 
file is divided into a plurality of information elements and 
the divided information elements are selected and com- 
bined to produce a plurality of information blocks, and 
then the information blocks are transmitted in a separate 
condition from each other to a recipient and division ex- 
traction data is transmitted to the recipient along with 
the separated information blocks, whereafter the recip- 



ient side receiving the data re-divides and integrates the 
information elements included in the information blocks 
into the correct order based on the division extraction 
data to restore the original electronic information. 
5 [0019] When an electronic information file is to be 
sent preferably it has a higher degree of security be- 
cause a communication path used is sometimes widely 
open to the public. Also in such an instance, where a 
plurality of information blocks are sent by different corn- 
to munication means, a considerably high degree of secu- 
rity can be assured. 

[0020] Since the information blocks in the present in- 
vention individually can^ mere part of necessary infor- 
mation, even if some infomnation block is acquired dur- 
15 ing communication, the entire information cannot be re- 
stored. . 
[0021] Accordingly, preferably at least one of the in- 
formation blocks and the division extraction data is 
transmitted to the recipient by second transmission 
20 means different from the transmission means for the 
other electronic information. 

[0022] Where all of the infomnation blocks and the di- 
vision extraction data are not sent using the same trans- 
mission means but some of them are transmitted by dif- 
25 f erent transmission means, even if a thief is present mid- 
way of a communication path, it cannot collect all infor- 
mation, and this provides a higher degree of security. 
[0023] If the infonnation blocks are sent at different 
points of time from each other or sent using different 
30 communication routes from each other, then it is very 
difficult to steal all infomnation blocks without a miss on 
the way of the communication path, and only part of the 
information can be acquired to the utmost. Therefore, 
even when authentication data of the person itself is 
35 sent, it can be prevented that a third party steals the 
authentication data. 

[0024] It is to be noted that preferably the division ex- 
traction data includes data for conf innation of the origi- 
nality of the electronic infomnation file. The identity be- 
40 tween the electronic infomnation file which has been in- 
tended to be sent and the electronic infonmation re- 
stored by the recipient can be conflmned with a high de- 
gree of certainty by verifying the fact that the division 
extraction data and contents ot the received information 
45 blocks are consistent. 

[0025] Further, the identity between the electronic in- 
formation file which has been intended to be sent and 
the electronic information restored by the recipient may 
be confirmed by placing an information element select- 
so ed from among the information elements, that is. a key 
element, into infomiation blocks to be sent along differ- 
ent communication routes so that the key element may 
be included commonly and verifying, when the informa- 
tion elements are to be integrated, the identity between 
55 the key elements included in an overiapping relationship 
in the received information blocks. 
[0026] It is to be noted that, in order to confimn that 
the electronic information sent is identical with the elec- 
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tronic informmion file which has been Intended to be 
sent, also a simple method of checking whether or not 

inZa .t' °' '■"'""'^^'^ individual files co- 
incide with each other is applicable 

"'^tff""'"^ assurance method for electronic 5 
infoimaton of the present Invention is used for on-line 
sales of an application program or a database, then 
even ,f any other person than a legal purchaser steals 
electronic information being communicated, onfypart of 
the infomiation can be acquired, and consequent^ the io 
program cannot be executed or useful InfonJation can 
not be acquired. Accordingly, since there Is no motiva- 
tion of stealing electronic Infomiation being communi- 
cated, the merit to the selling party is not damaged Sy 

L?^.*^ • '""f''^'* " ^^^""'y assurance method for 
electronic infomiation of the present Invention is applied 
o send authentication data of the person itself, then in- 
fomnalion exchange with a high degree of security can 

^rnt2'":'"""''^"*'^'°^9erybyathirdpartyispre 
vented with certainty. >- 7 k 

[0029] If further strict assurance Is required, prefera- 
bly the original of electronic infonnation to be sent is 
stored, and electronic Infomiation restored by the rccio- 
lent side Is sent back and verified with the original of the 25 
electronic infomiation to confirm the Identity 

" *e electronic infomiation re- 
stored by the recipient is sent back and verified with the 

theTdenZ tK °' infomiation to conflm, 

s alS^H ^'^'^""'^ infomiation 3o 

IS altered dunng communfcation or misses partV this 
can be discriminated immediately to take a counter- 
measure. 

EnS K ".if *° ^"^^ information blocks ac- 

quired by the recipient may be sent back as they are 35 
and verrfied with the original of the electronic infomia- 
tln^"hL'"!''^K °" P^rfo'-^^ed for each of the infomia- 
tion blocks, ttien a damaged portion can be specified 
and this facilitates a counteimeasure. 
r0032J If a difference from the original Is detected 40 

n»thH°"K« !T '^"^ '^"^"'"^ °f communication 
path doubtful, the infomiation may be sent again orthe 

l^!^Z""T°" "^'^ '"^y "'^"9^^ »° P^^vent Inter- 
e ence of a person who has altered the information It 

rnl T'^'^ '®^'P'^"' the elec- 45 

tronic infonnation with confidence when a result of the 

rooSf " tJ" 'Tr'^ """^ transmitting person. 
[0033] The reliability is improved If a transfer station 
or so called transfer authority which is neutral and im- 
partial IS interposed in the transmission means so that so 
infomiation transmission may be performed through the 
transfer station. The transfer station transfers an infor- 
rnation block included In an infomiation package sent 

To^l^ 1^ "^'^'^ °" ^'^'^^^ infomiation. 

[0034] Where such a route as described above is 55 
used to send the information blocks, since the appear- 
ances of the divided Infomiation blocks are different 
from each other, it is difficult for a thief midway of the 



communication path to collect all information btocks 
necessary to restore the electronic infomiation file and 
the security is further improved. 

rticularly, even if only a portion including the 
dn^is on extraction data is sent through the transfer sta- 

S2 i • T ^° '^^'^ *^«"«fer station ap- 

mLt^n <;'P''^^*f.^'^"'<1"e to transfer the electronic info^- 

[0037] Furttier, the transmitted infomiation may not 
necessarily be used immediately by the recipient 
T^refore. the transferstation may keep the infomiation 
blocks sent by the transmitting party such that the recip- 

milT^K,''^!!^^ '""^ '° ^^"S'^it the infor- 

rnation blocks when necessary so that it may integrate 

electronic information. 

[0O38] Further, also where a system wherein a certi- 
fication station or certification aulhority Is Interposed Io 
assure the Identity of infomiation in order to prevent a 
dispute between parties concerned, it is possible to di- 
visionally possess information blocks obtained by divi- 
sion «nH ir™"" "y the certification 
s ation and the parties concerned such that, when the 
electronic infomiation Is to be used, the pertaining infor- 

tTon H /r'' '^"^'^'^ '''"^ '^'^ certification sta- 
tion and the parties concerned and integrated to restore 
the ongina electronic infomiation to assure the security 
or the electronic information. 

w L '^'^ assurance method 

£d cn^r,K °f the present invention Is uti- 

lized such that part of information is deposited to the 

reaS*?h" 'T" ""^inal infomiation is 

Z K L '"f°""^t'°" block in hand and the infomia- 

mat^n block deposited to the certification station are 
in ^/k° "^"^ infomiation. Accordingly, even if 

station 

cKl tf'^ °' the alteration is found 

cleariy. and since the infomnatlon stored by the certifi- 
cation station Is not the entire information but part of the 
•nforniation. the Information capacity required for the 

SviS.r. / ^"/'^^""^^'"S the security of infomiation Is 
divided nto the three parties, it is an advantage in ad- 
ministration Of the certification station that thi burden 
on the certification station is light. 

Brief Description of the Drawings 
[0040] 

FIG. 1 is a block diagram illustrating a concept of a 
secunty assurance method for electronic infomia- 
tion of the present invention; FIG. 2 Is a view illus- 
trating an operation of the present Invention- FIG 3 
IS a flow diagram Illustrating a first embodiment of 
the security assurance method for electronic infor- 
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mation of the present invention; FIG. 4 is a block 
diagram of a system which uses the present em- 
bodiment; FIG. 5 is a flow diagram illustrating a sec- 
ond embodiment of the security assurance method 
for electronic information of the present invention; 
FIG. 6 is a block diagram of a system which uses 
the present embodiment; FIG. 7 is a flow diagram 
illustrating a third embodiment of the security assur- 
ance method for electronic information of the 
present invention; FIG. 8 is a block diagram of a sys- 
tem which uses the present embodiment; FIG. 9 is 
a flow diagram illustrating a fourth embodiment of 
the security assurance method for electronic infor- 
mation of the present invention; FIG. 10 is a block 
diagram illustrating a fifth embodiment of the secu- 
rity assurance method for electronic infomnation of 
the present invention and FIG. 11 is a block diagram 
illustrating a function of acertitication station or cer- 
tification authority to which the present invention is 
applied. 

Best Mode for Carrying out the Invention 



[0041] The security assurance method for electronic 
infomiation of the present invention is a method of mak- 
ing the security of electronic infomnation certain in stor- 
age or communication of an electronic information file. 
According to the method of the present invention, even 
if someone steals electronic infomnation during storage 
or during communication, the value of the infomnation 
which can be acquired by theft is reduced to prevent 
damage by the theft and the gain of the theft is reduced 
to prevent a stealing action. Further, if missing of infor- 
mation or alteration to information occurs during com- 
munication, then this fact is detected thereby to assure 
the security. 

[0042] In thefollowing, details of the present invention 
are described with reference to the drawings, 
[0043] FIG. 1 is a block diagram illustrating a concept 
of the present invention, and FIG. 2 is a view illustrating 
an operation of the present invention. FIG. 1 illustrates, 
as an example of form of use of the present invention, 
a case wherein an electronic information file is divided 
into six information elements and divided into two infor- 
mation blocks, 

[0044] in the security assurance method for electronic 
information of the present invention , an object electronic 
information file 1 is divided into a suitable number of in- 
formation elements 2, Here, for simplification, a case 
wherein the electronic information file 1 is divided into 
six infonnation elements A, B. C, D, E and F is described 
as an example. The infonnation elements 2 need not be 
divided at a position at which they have significance as 
information, and In order to reduce the possibility of 
stealing, preferably the information elements 2 are ob- 
tained by merely dividing the electron^ infonnation file 
1 physically. 

[0045] The order of an^angement of the information el- 



ements A. B, C, D, E and F obtained by the division is 
changed and they are grouped suitably to fomi a suita- 
ble number of infonnation blocks 3, 
[0046] In the example shown, the information ele- 
5 ments A, D and E are distributed in the first infomnation 
block 3, and the infomnation elements B, C and F are 
distributed in the second infonnation block 3. It is to be 
noted that also the order of arrangement of the informa- 
tion elements in each information block 3 can be 
10 changed arbitrarily. 

[0047] Even if such information blocks 3 are read out 
by a third party, since the infonnation elements A, B, 
C. ... are not arranged in a significant arrangement, con- 
tents of the electronic infomnation cannot be read if they 
15 remain as they are. 

[0048] Further, since the electronic infomnation is in a 
divided state, the contents of it cannot be restored If all 
of the infonnation blocks are not acquired. For example, 
if authentication data of the person itself illustrated in (a) 
20 of FIG. 2 is divided as seen in (b) of FIG. 2, then even 
if one of the information blocks is acquired and the in- 
formation is restored successfully, the infonnation can- 
not be used as authentication data. Therefore, even if 
someone accesses the electronic infomnation illegally. 
25 it is not easy to make it possible to utilize the electronic 
information, and the security of the information can be 
assured. 

[0049] The infonnation blocks 3 are stored into a stor- 
age apparatus or sent to a recipient in accordance with 
30 an object. 

[0050] A user of the electronic infonnation divides the 
information blocks 3 acquired from the storage or re- 
ceived from the transmitting person into original infor- 
mation elements 4 (A, B, C. ...) and re-an-anges the in- 
35 formation elements 4 into a correct order to fomn a us- 
able electronic infonnation file 5 thereby to restore the 
original electronic information file 1 . 
[0051] Basic infonnation necessary to restore the 
electronic information file 1 is division infomnation of the 
40 infonnation elements A, B. C, ... included in the infomna- 
tion blocks 3 and information of the position and the 
length of each infonnation element in the electronic in- 
formation file 1 . 

[0052] After all of the infonnation blocks 3 relating to 
45 the object electronic infonnation file 1 are collected, the 
information elements in the infonnation blocks 3 can be 
cut out and re-arranged into a correct order using the 
information of the top address and the word length of 
each of the infomnation elements 2. 
50 [0053] Further, when the electronic infonnation file 1 
is to be restored, information for specifying the object 
electronic infonnation file 1 or infonnation of the order 
of arrangement of infonnation elements included in 
each block when the infonnation elements 2 are re-ar- 
55 ranged to form the information blocks 3 may be utilized. 
[0054] In order to restore the electronic infomnation 
file IJt is required first to confimn that the collected in- 
formation blocks 3 relate to the object electronic infor- 
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mation file 1 and that all relating Information blocks have 
been collected without a miss. In this instance, the op- 
eratron can be performed efficiently if an identification 
region XI or X2 is annexed to an information block or 
an information element and ID information for specifying 
the electronic infonmation file 1 is stored in and used to- 
gether with the identification region. 
[0055] Further, the electronic information file 5 ob- 
tained by re-dividing the Information elements included 
m each block using division infoimation and re-arrang- 
ing them in accordance with the order of anangement 
of the divided information elements 4 is the same as the 
electronic infonnation file 1 . 

[0056] It is to be noted that whether or not the restored 
electronic information file 5 and the original electronic 
information file 1 are sameas each other can be verified 
with a certain degree of certainty, for example, by com- 
panng the total word lengths of the two with each other. 
[0057] Division extraction data including such basic 
information is produced when the information blocks 3 
are produced and stored or sent with an identification 
region annexed to part of the information blocks 3 and 
then utilized to restore the electronic information file 1 
The division extraction data may be annexed for each 
information element. 

[0058J It Is to be noted that the division extraction data 
may be stored or sent separately from and independ- 
ently of the information blocks 3. 
[0059] According to the security assurance method 
for electronic infomiation of the present invention the 
number of the information blocks 3 con-esponding to the 
single electronic information file 1 is not limited to two 
but may be a plural number equal to or greater than 
three or may be one. Since, in any case, the arrange- 
ment of information elements in each information block 
3 IS different from the original arrangement, a third party 
cannot read out and utilize the electronic infonnation 
Consequently, the security of the electronic information 
can be assured. 



(Embodiment 1) 

[0060] In the first embodiment, the security assurance 
method for electronic infomiation of the present inven- 
tion Is applied to transmission of an electronic infomia- 
tion file securely to the other party using a communica- 
tion path. 

[0061 ] FIG. 3 is a flow diagram illustrating the present 
embodiment, and FIG. 4 is a block diagram of a system 
which uses the present embodiment. 
[0062] First, a basic form of the present embodiment 
IS descnbed with reference to FIGS. 3 and 4. 
[0063] An originator of electronic information first pre- 
pares newly or extracts from a database and edits elec- 
tronic infomiation to be transmitted to prepare an elec- 
tr-onic infomiation file 11 (SI). An example of subject 
electronic infomiation is electronic information for which 
high security is required such as authentication data of 



the person itself or valuable electronic infomiation such 
as software which is sold over a communication path 
[0064] Then, division software 1 2 is used to divide the 
electronic infomiation file 1 1 into a plurality of infomia- 
5 tion elements 13 (S12). To the division software 12 the 
division position of each of the infomiation elementk 13 
in the electronic information file 11 and the word length 
of the infoimation element can be indicated. 
[0065] It is to be noted, instead of indicating the divi- 
sion position and the word length of each infonnation 
element, the division software 12 itself may detemiine 
the division position and the word length if the number 
of divisions is designated. Although the division number 
can be determined arbitrarily, where electronte informa- 
^on up to approximately loo kBytes is an object, it may 
be detemiined that a number, for example, equal to or 
smaller than 1 00 is selected. 

[0066] Then, extraction software 1 4 is used to distrib- 
ute the information elements 1 3 into a plurality of infor- 
^0 mation blocks 15 (S3). The extraction software 14 has 
a function of re-arranging the divided information ele- 
ments 13 into a different order and another function of 
distnbuting the infonnation elements 13 into the infor- 
mation blocks 1 5. An operator can indicate the number 
^5 of information blocks. 

[0067] Further, the division infomiation and a result of 
the re-an-angement of the information elements 13 are 
converted into division extraction data of the electrons 
mfomiation and individually annexed to the information 
^ elements 13. The division extraction data of all of the 
information elements 13 distributed to the information 
blocks 15 may be annexed collectively in the identifica- 
tion regions XI and X2 of the infomiation blocks 1 5 (S4) 

v.°®®L'* *° identification regions 

XI and X2 may include data regarding an originator and 
a recipient, data regarding electrons infomiation such 
as Its preparing person and its owner, data which de- 
scnbes a range within which the electronic Information 
can be utilized such as an authorized user or a term of 
validity, data for specifying software to be applied such 
as integration software and so forth. 
[0069] Further, if an ID which Indtoates electronic in- 
fomiation is described In an identification region then 
since this facilitates assorting of information blocks this 

IS convenient to collect Information blocks relating to ob- 
ject electronic infomiation in order for a recipient to re- 
integrate the infbmialion blocks to restore an electronic 
infonnation file. 

[0070] It is to be noted that the division extraction data 
may be sent to the recipient separately from and inde- 
pendently of the infonnation blocks. Further, instead of 
annexing the division extraction data discretely to the 
information blocks, the division extraction data may be 
annexed collectively to one of the Infomiation blocks 
» Furthermore, the division extraction data regarding the 
entire electronic information file may be annexed to all 
of the infonnation blocks. 

[0071] Then, the infomiation blocks 15 are individual- 
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ly placed Into packages to be transnnitted to transfer sta- 
tions 21 (S5). In each of the packages, the address of 
a person to receive the package finally is placed. The 
packages are enciphered and sent to the transfer sta- 
tions 21 (S6). The enciphennent processing nnay be per- 
fomned applying a suitable known method. 
10072] In this instance, different destinations can be 
selected for the individual packages. Communication 
means to be used is selected based on the degree of 
security which depends upon the risk of a communica- 
tion path and the characteristic of the electronic infor- 
mation. Where leakage or alteration should be mini- 
mized, a number of communication means as great as 
possible are used. 

[00731 It is to be noted that, when the risk of leakage 
of infomnation is low, an ordinary communication path in 
which no transfer station is present may be used. Since 
the security assurance method of the present Invention 
has a high degree of security because it places elec- 
tronic information into communication paths in a divided 
and re-an-anged state, even if an ordinary communica- 
tion path is used, the security assurance method pro- 
vides a sufficiently high degree of security when com- 
pared with conventional methods. 
[0074] Further, as communication means, for exam- 
ple, a method of using a mail to send a portable storage 
device such as a floppy disk or a like method may be 
selected. 

[0075] Each of the transfer stations 21 receiving a 
package deciphers the package to read the destination 
infomiation placed in the package (S7). 
[0076] Further, the transfer station 21 enciphers the 
infonnation blocks placed in the package again and 
sends them to the indicated recipient (S8), 
[0077] Since the infonnation blocks 15 are distributed 
in a state wherein contents thereof cannot be discrimi- 
nated from their appearance to different transfer sta- 
tions in this manner, even if a third party can acquire the 
electronic infonnation present in the communication 
path, it is difficult for the third party to discriminate and 
collect necessary information, and the third party cannot 
restore the object electronic information. 
[0078] The recipient receives and deciphers infonna- 
tion blocks 31 sent from the transfer stations (S9) and 
then searches the infonnation blocks or the identifica- 
tion region portions of the information elements to col- 
lect all of the information blocks 31 required to restore 
the object electronic information (SIC).;/ 
[0079] Further, the recipient extracts the division in- 
formation used when the infonnation elements 13 are 
produced and the extraction information used when the 
infonnation blocks 1 5 are produced from the division ex- 
traction data of the identification region portions (S11 ). 
[0080] Then, the recipient re-divides the information 
blocks 31 based on the division information and the ex- 
traction information to cut out the original information el- 
ements 13 (S12) and re-arranges the infonnation ele- 
ments 13 into the original order using integration soft- 



ware 32 (813). 

[0081 ] Finally, the recipient integrates all of the infor- 
mation elements to form an electronic information file 
33. In this instance, the recipient compares the total 

5 length of the electronic information file 33 formed by the 
integration with the total length value of the original file 
included in the division extraction data (SI 4). If they co- 
incide with each other, then it can be determined that 
the original electronic infonnation file 11 has been re- 

10 generated successfully with a considerably high degree 
of probability. Further, it is also possible to use informa- 
tion which describes a characteristic of the original or 
position information in which a suitable bookmark is in- 
serted in order.to confinn the identity with the original 

15 with a higher degree of accuracy. 

(Embodiment 2) 

[0082] In the second embodiment, the electronic in- 
20 formation security assurance method of the present in- 
vention is provided with means for assuring the original- 
ity of electronic infonnation with a higher degree of reli- 
ability. 

[0083] FIG. 5 is a flow diagram illustrating the elec- 
ts tronic information security assurance method of the sec- 
ond embodiment provided with means for assuring the 
originality by an originator of electronic infonnation, and 
FIG. 6 is a block diagram of the same. 
[0084] In the following, the embodiment of the present 
30 invention which is provided with means for confirming 
the originality by an originator of electronic infomnation 
is described with reference to FIGS. 5 and 6. 
[0085] It is to be noted that, since the security assur- 
ance method on which the present embodiment is 
35 based is the same as that described hereinabove, in the 
following description, overiapping description is avoided 
to such a degree that simplification or omission of a por- 
tion does not cause misunderstanding. 
[0086] When the originator prepares an electronic in- 
40 formation file 11 to be sent, he produces a copy 1 7from 
the original (S21) and stores the copy 17 (822). it is to 
be noted that the original 11 may be stored In place of 
the copy 17. 

[0087] Then, the originator uses division extraction 
45 software 16 to work the original 11 of the electronic in- 
formation file based on division infomnation and extrac- 
tion information given from an operator or produced 
partly by the computer to form an information block 15 
similarly as in the first embodiment described herein- 
50 above (S23). It is to be noted that, where the original 1 1 
is stored, the copy 17 is selected as the subject of the 
working. 

[0088] The infonnation blocks 15 are individually sent 
to transfer stations 21 similariy as In the first embodi- 
55 ment (824). 

[0089] The transfer stations 21 transfer the received 
information blocks 15 to the designated recipient (825). 
[0090] The recipient checks the received information 
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blocks 31 to collect all of the information blocks 31 nec- 
essary to restore the object electronic Information (326). 
[0091] Thereafter the recipient uses integration soft- 
ware 32 to extract infomaation elements in the informa- 
tion blocks 31 based on the extraction information and 
the division information included in the acquired division 
extraction data and re-arrange and integrate the infor- 
mation elements to form an electronic information file 
33 (S27). 

[0092] Further, the recipientproducesacopy35of the 
fonned electronic information file 33 (S28) and sends 
back the copy 35 to the originator of the electronic infor- 
mation through a transfer station 22 by a similar method 
to that in the transmission from the originator (S29). 
Preferably, a plurality of transfer stations are used for 
the transfer station 22 in this instance similarly as in the 
case of the transmission. Further, the copy 35 to be sent 
back is preferably enciphered to raise the security. 
[0093] The originator compares the received copy 35 
of the restored electronic information file and the copy 
1 7 stored therein with each other to confirm the identity 
between them (S30). 

[0094] If the two do not coincide with each other, then 
since the copy 35 cannot be used as the electronic in- 
fomriation, a notification of this is issued (S31 ). If the re- 
cipient does not receive a warning notification from the 
originator, then it can discriminate that the restoration of 
the infonmation file has been perfomied normally (S32). 
[0095] It is to be noted that, if the two files do not co- 
incide with each other, then since this represents that 
some trouble has occurred during the communication, 
a cause must be found out and excluded so that later 
communication may be pert onmed securely If the cause 
cannot be excluded, then preferably the communication 
means is changed. 

[0096] Where the originator confimis that restoration 
of electronic information by the recipient has been per- 
fomied correctly in this manner, electronic information 
exchange of very high reliability is realized. 



(Embodiment 3) 

[0097] The third embodiment is an originality assur- 
ance method for electronic information wherein the se- 
curity assurance method for electronic information of the 
present invention is provided with means for confirming 
the originality of each information block to delect abnor- 
mality of individual communication paths to further facil- 
itate a countermeasure. 

[0098] FIG. 7 is a flow diagram illustrating the present 
embodiment, and FIG. 8 is a block diagram of a system 
which uses the present embodiment. In the following, 
the present embodiment is described in detail with ref- 
erence to FIGS. 7 and 8. 

[0099] It is to be noted that, also in the present em- 
bodiment, overiapping description is avoided by simpli- 
fying or omitting the same portion as that described al- 
ready. 



[0100] Similarty as in the first embodiment, an origi- 
nator prepares an electronic information file 11 to be 
transmitted (S41). and cuts out and shuffles information 
elements based on division infonnation and extraction 
5 infonnation to form information blocks 1 5 (S42). 

[0101] Then, the originator produces a copy from the 
information blocks 15 and stores the copy (S43). 
[0102] Then, the originator sends packages in which 
the information blocks 1 5 are placed to transfer stations 
10 21 by the same method as in the first embodiment (S44) 
The transfer stations 21 decipher the packages to read 
the the address of a recipient and transfers the infomia- 
tion blocks 15 to the designated recipient again (S45). 
[0103] The recipient produces a copy of the received 
^5 information blocks 31 (S46) and sends back the copy to 
the originator through a transfer station 23 (S47). 
[01 04] The originator verifies the copy of the informa- 
tion blocks 31 sent back thereto and the copy of the orig- 
inal information blocks 1 5 stored therein with each other 
^0 to confinn whether or not they coincide with each other 
{S48). 

[0105] If the two coincide with each other, then since 
the information blocks 31 have not been subject to al- 
teration' during the communication, they can be used as 
25 they are to restore the electronic information. 

[0106] On the other hand, when the two do not coin- 
cide with each other, this represents that a communica- 
tion path which has been used for transmission of an 
infomiation block is abnonmal. While detection of abnor- 
30 mality is possible in the second embodiment described 
above, since abnonnality is detected in an integrated 
form of all communication paths, it is difficult to specify 
a communication route which is abnormal. However, 
where the method of the present embodiment is usedi 
55 the abnormal route can be specified simply as described 
above. Accordingly also it is easy to take a counter- 
measure such as removal of the trouble. 
[01 07] A notification of a result of the verification per- 
fomied by the originator is sent to the recipient (S49). 
^0 [0108] If the result of the verification proves that the 
two copies coincide with each other, then the recipient 
uses integration software 32 to perform restoration of 
the electronic infomiation file in accordance with a pro- 
cedure same as that in the first embodiment (S50). In- 
45 tegrated data 33 formed from the information blocks 31 
become a file 34 having the same contents as those of 
the original electronic infomnation file 11 . 
[0109] It is to be noted that, as described hereinabove 
in connection with the first embodiment, exchange of 
50 electronic infomnation may be performed using a com- 
munication path in which such transfer stations 21 or 23 
as described above are not present. 
[01 10] Further, the transfer stations may store the in- 
formation blocks transmitted from the transmitting per- 
55 son and then transmit the infomnation blocks in accord- 
ance with a request of the recipient. The recipient col- 
lects all information blocks and integrates, restores and 
uses them. 
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(Embodiment 4) 



[0111] According to the fourth embodiment, the secu- 
rity assurance method for electronic information of the 
present invention is applied to storage of an electronic 
information file into an external storage apparatus of a 
computer system. 

[01 12] FIG. 9 is a block diagram of a computer system 
which uses the security assurance method for electronic 
infonnation of the present embodiment. 
[Oil 3] In the following, the present embodiment is de- 
scribed with reference to the drawing. 
[0114] It is to be noted that, since operations and ef- 
fects of the components of the present embodiment are 
much common to those of the embodiments described 
hereinabove, like components having like functions to 
those in the embodiments described above are denoted 
by like reference numerals and the description of them 
is simplified lo prevent overlapping description. 
[01 1 5] An electronic information file 41 prepared by a 
computer system is divided into infomiation elements 
and re-arranged by division extraction software 42 so 
that it is distributed into a plurality of infomnation blocks 
43 and then stored into a storage apparatus 50, 
[01 1 6] When the electronic infonnation file 41 is to be 
extracted from the storage apparatus 50, infonnation 
blocks 61 which carry the subject electronic infomiation 
are all collected and integration software 62 is executed. 
The integration software 62 extracts division infonnation 
and extraction infonnation from the information blocks 
61 , cuts out the infonnation elements in the infonnation 
blocks 61 based on the infonnation, re-arranges the in- 
formation elements into the original order and integrates 
them to produce an electronic information file 63. 
[0117] Where the electronic infonnation security as- 
surance method of the present embodiment is used, 
since an electronic infonnation file stored in the storage 
apparatus 50 is divided in a plurality of information 
blocks, it is difficult to collect all relating information 
blocks so that object electronic infonnation may be re- 
stored. Further, since infonnation elements in the infor- 
mation blocks are scattered like paper infonnation bro- 
ken by a shredder, also it is not easy to regenerate part 
of electronic infonnation. 

[0118] Leakage of information through accessing 
from the outside can be prevented in this manner 
[01 19] it is to be noted that electronic information may 
be enciphered when it is to be recorded into the storage 
apparatus 50. 

[0120] Further, the storage apparatus 50 need not be 
a single storage apparatus, and electronic information 
may be stored into storage apparatus separate from 
each other for individual infonnation blocks. 
[0121] The electronic infonnation security assurance 
method of the present embodiment can be applied when 
an authentication station for which the security is re- 
quired particularly stores authentication data of the per- 
son itself into an external storage apparatus such as a 



hard disk apparatus or a magnetic tape apparatus. 
(Embodiment 5) 

5 [0122] In the fifth embodiment, the security assurance 
method for electronic infonnation of the present inven- 
tion is provided with means for making use of part of 
electronic information to secure the originality of the 
electronic infonnation. FIG. 10 is a block diagram illus- 

10 trating originality assurance means used in the present 
embodiment. Since the security assurance method for 
electronic infonnation on which the present embodiment 
is based is the same as that described hereinabove, in 
the following description, overiapping description of the 

15 portion is simplified or omitted to prevent overlapping 
explanation. 

[0123] FIG, 10 illustrates a case wherein, as an ex- 
ample of form of use of the present invention, an elec- 
tronic information file is divided into seven information 
20 elements and divided into two infonnation blocks. 

[0124] The order of arrangement of the divided infor- 
mation elements A, B, C, D, E, F and G is changed, and 
they are grouped suitably so that they are distributed 
into two infonnation blocks. In this instance, some of the 
25 infonnation elements are included commonly as key el- 
ements into both of the infonnation blocks. Further, iden- 
tifk:ation regions XI and X2 in which division infonnation 
of the infonnation elements, information of the position 
and the length of each information element in the elec- 
30 tronic infonnation file, ID infonnation of the electronic 
file and so forth are recorded are annexed to the infor- 
mation blocks so that they can be utilized for restoration. 
[0125] In the example illustrated in FIG. 1 0, the infor- 
mation elements A, B, C, E and F are distributed in the 
35 left infonnation block while the infonnation elements B, 
D, E and G are distributed in the right infonnation block, 
and the infonnation elements B and E are included as 
key elements in both of the information blocks. Since 
the information elements in each infonnation block are 
40 changed in order suitably and are not arranged signifi- 
cantly, even if the information block is read by a third 
person, contents of the electronic information cannot be 
read as they are. The infonnation blocks are stored into 
a storage apparatus or sent to a recipient in accordance 
45 with an object. 

[0126] A user of the electronic information divides the 
acquired information blocks into the original infonnation 
elements (A, B, C, ...) based on the infonnation record- 
ed in the identification regions XI and X2, and re-arrang- 
50 es the infonnation elements into a con-ect order to re- 
store the original electronic infonnation file. 
[0127] Upon restoration, the infonnation elements B 
and E which are included in an overlapping relationship 
in the two infonnation blocks and serve as key elements 
55 are detected and verified individually with each other. 
Thus, if any of the infonnation blocks has been subject 
to some alteration upon storage or transmission of the 
information, then since the contents of the overiapping 
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information elements do not coincide with each other 
the abnormality can be detected simply. 
[0128] According to the abnormality detection method 
used in the present embodiment, since a Irey element 
which IS a subject of verification cannot be extracted 5 
even if an information block is observed by itself, an at- 
tack of a third party can be prevented readily Further, 
no special additional information is required, and infor- 
mation processing forconfimiation of the security is sim- 

10 

I0129J It is to be noted that naturally the abnomiality 
detection method of the present embodiment may be 
used together with any other method to improve the se- 
curity. 

(Embodiment 6) 



[01 30] The sixth embodiment relates to a certification 
station or a cerlificalion authority which applies the se- 
cunty assurance method for electronic information of the so 
present invention to divide and store information into 
several places and accurately perform various verifica- 
tions of transaction contents and so forth between the 
parties concerned. 

[0131] FIG. 11 is a block diagram illustrating a function 25 
of a certification station or authority to which the present 
invention is applied. Since the security assurance meth- 
od on which the present embodiment is based is the 
same as that described hereinabove, in the following de- 
scnption, a portion describing the certification authority 30 
isdescribedin detail while overiapping description of the 
other portion is avoided. 

[0132] A first party I and a second party II convert mu- 
tually consented transaction contents into electronic in- 
formation and store the electronic information. However 35 
since an electronic document leaves no mari<s even if it 
IS rewritten, the originality of It cannot be secured Ac- 
cordingly, in orderto minimize the possibility of the future 
dispute, it is demanded to utilize a certification authority 
CA. which is a third party organization in which confi- 40 
dence can be placed, to deposit contents of a transac- 
tion and, when necessary, to receive a presentation of 
and confirm the original. 

[0133] However, where an original is recorded in Its 
full text, a very great storage capacity is required forthe 45 
certification authority CA. Further, even the certification 
authority CA may possibly suffer from alteration, and if 
It IS tried to completely secure the genuineness of elec- 
tronic information, then considerable difficulty is in- 
volved in management and administration of the certifi- so 
cation authority CA. 

[01 34] The present embodiment is configured by ap- 
plying the electronic information security assurance 
method of the present invention and is an authentication 
system wherein the burden on the certification authority ss 
CA IS low andtheoriginallty of electronic information can 
be secured wHh a high degree of certainty. 
[01 35] The parties I and II concerned divide contents 



of the mutual agreement into information blocks A B 
and C based on the method of the embodiments de- 
scnbed hereinabove. The first party I concerned stores 
the first information block A while the second party II 
concerned stores the second infomiation block C Fur- 
ther, the third information block B is deposited to the cer- 
tification authority CA. 

[0136] In such an authentk:ation system described 
above, if any of the organizations alters its record the 
onginal cannot be restored. Accordingly, the actually re- 
stored electronic information conveys the contents of 
the onginal correctly. Therefore, the certification author- 
ity CA can secure the originality of the restored electron- 
ic information only by recording a very small part of the 
onginal. Since the storage capacity to be possessed by 
the certification authority CA is reduced and the fuM text 
of contents of the agreement need not be stored also 
the storage responsibility of the certification authority 
CA is moderated. 



Industrial Applicability of the Invention 

[0137] As described in detail above, since the security 
assurance method for electronic information of the 
present invention divides an electronic information file 
once into information elements, re-an-anges and places 
the infomiation elements separately into information 
blocks and then places the information blocks into com- 
munication paths or stores the information blocks into a 
storage apparatus, even if a third party steals an infor- 
mation block being communicated or stored because 
small infomiation elements are placed in a scattered 
forni in the infonmation block and contents of the elec- 
tronte information cannot be read or discriminated leak- 
age of the secret can be prevented. Further, when the 
electronic infomiation is to be restored, the originality of 
the electronic information can be confirmed readily It is 
to be added that, where a communication result re- 
ceived over a communication path by a recipient or a 
restored electronic information file is sent back to its 
originator and verified with a stored copy, the originality 
can be secured with a very high degree of reliability. 

Claims 

1. A security assurance method for electronic informa- 
tion, characterized in that an electronic informa- 
tion file is divided into a plurality of information ele- 
ments; the divided infomiation elements are select- 
ed and combined with their order changed to pro- 
duce one or more Information blocks in which all of 
the information elements are included If all of the 
information blocks are integrated; division extrac- 
tion data in which formation Information of saW in- 
fonnalion elements and the information blocks are 
recorded is produced; said infomiation blocks and 
the division extraction data are stored or transmit- 
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ted; and when said electronic infomnation is to be 
utilized, all of said infornnation blocks and said divi- 
sion extraction data are collected and the infonna- 
tion elements included in said infomnation blocks 
are re-divided, re-arranged in the connect order and 
Integrated based on said division extraction data to 
restore the original electronic infornnation file. 

2. A security assurance method for electronic infomna- 
tion according to claim 1 , characterized in that 
said division extraction data is stored or transmitted 
separately. 

3. A security assurance method for electronic infomna- 
tion according to claim 1 . characterized in that 
said division extraction data relating to said infor- 
mation elements is annexed for each of said infor- 
mation elements. 

4. A security assurance method for electronic infomna- 
tion according to any one of claims 1 to 3, charac- 
terized in that said information blocks and the di- 
vision extraction data are stored into an external 
storage apparatus to keep the electronic infonna- 
tion in said external storage apparatus in security. 

5. A security assurance method for electronic infomna- 
tion according to any one of claims 1 to 3, charac- 
terized in that a plurality of said information blocks 
are formed, and said blocks are transmitted in a 
separate state from each otherto a recipient togeth- 
er with said division extraction data. 

6. A security assurance method for electronic infomna- 
tion according to claim 5, characterized in that 
said division extraction data includes data for con- 
firmation of the originality of said electronic infomna- 
tion file. 

7. A security assurance method for electronic infomna- 
tion according to any one of claims 1 to 6, charac- 
terized in that an infomnation element selected 
from among said infomnation elements is included 
commonly into a plurality of information blocks, and 
when the information elements are integrated, the 
identity of said information elements included com- 
monly in an overlapping relationship in the different 
infonnation blocks is verified to confirm the security 
of the information. 

8. A security assurance method for electronic infomna- 
tion according to any one of claims 5 to 7, charac- 
terized in that further the original of the electronic 
infonnation to be transmitted is stored; the electron- 
ic infonnation restored by the recipient side is sent 
back; and the electronic infonnation is verified with 
said original of the electronic infonnation to confimn 
the identity. 



9. A security assurance method for electronic informa- 
tion according to any one of clainns 5 to 7, charac- 
terized in that further the original of the electronic 
information to be transmitted is stored; the informa- 
5 tion blocks received by the recipient side are sent 
back; and the infonnation blocks are verified with 
said original of the electronic infonnation to confirm 
the identity. 

10 1 0. A security assurance method for electronic infomna- 
tion according to any one of clainns 5 to 9, charac- 
terized in that at least one of said information 
blocks and said division extraction data is transmit- 
ted to the recipient by second transmission means 
15 different from the transmission means for the other 
electronic information. 

1 1 . A security assurance method for electronic informa- 
tion according to claim 1 0, characterized in that a 
20 transfer station is interposed in said transmission 
means or said second transmission means, and a 
block of the information to be sent by said transmis- 
sion means is accommodated into an infonnation 
package together with destination infonnation and 
25 sent to said transfer station, which in tum transfers 
the information block to said recipient based on said 
destination information. 
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A security assurance method for electronic infomna- 
tion according to claim 11 . characterized in that 
said transfer station stores and keeps said infomna- 
tion block until a request of said recipient is re- 
ceived. 

A security assurance method for electronic infomna- 
tion according to any one of claims 1 to 1 2, char- 
acterized in that said information blocks obtained 
by the division of the electronic infonnation file are 
possessed divisionally by a certification station and 
parties concerned^ and when said electronic infor- 
mation is to be used, all of said Infonnation blocks 
are collected from said certification station and said 
parties concerned and integrated to restore the 
original electronic information. 
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